Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
- COVID-19 Response Center
About hhiggins
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About hhiggins
07-02-2020
21Posts
13Likes
0Solutions
Jul 02, 2020Last Visited
User
Activity
User
Profile
Latest posts by hhiggins
| Subject | Views | Posted |
|---|---|---|
| 1220 | 07-02-2020 05:56 AM | |
| 2946 | 05-21-2020 08:00 AM | |
| 2897 | 05-21-2020 07:56 AM | |
| 3882 | 05-21-2020 07:48 AM | |
| 1913 | 05-14-2020 06:00 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 05-14-2020 06:00 AM | |
| 1 Like | 05-21-2020 07:48 AM | |
| 1 Like | 05-21-2020 07:56 AM | |
| 3 Likes | 04-21-2020 10:38 AM | |
| 1 Like | 04-24-2020 05:50 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 2 Likes |
User Badges
Community Statistics
| Member Since | 01-22-2013 12:31 PM |
| Date Last Visited | 07-02-2020 09:18 AM |
| Posts | 21 |
| Total Likes Received | 13 |
07-02-2020
05:56 AM
Arg! @hisingh ....Same problem again @AaronBeck . Virus/Win32.WGeneric.aktpum has been setting off alarm bells.
... View more
05-21-2020
08:00 AM
@Graeme_Riddell we are having issues getting Cortex XDR syslog data into our Rapid7 IDR SIEM as well. It looks like it can be configured at the Cortex XDR layer or at the Data Lake layer using the forwarding app.Where are you configuring syslog?
... View more
05-21-2020
07:56 AM
1 Kudo
@pkawula that is what we do. We implement Bitlocker via GPO and monitor through the Cortex XDR console. Using the Cortex XDR console alerted us to the fact that we were only using 128-bit encryption. We have since used GPO to enable 256-bit encryption going forward. Prior to Cortex XDR we had no visibility into this.
... View more
05-21-2020
07:48 AM
1 Kudo
I don't see anything specifically listed for VMware View on the compatibility matrix. https://docs.paloaltonetworks.com/compatibility-matrix/cortex-xdr/where-can-i-install-the-cortex-xdr-agent
... View more
05-14-2020
06:00 AM
1 Kudo
Starting yesterday I have seen virus alerts on my firewall relating to the above virus. The file names in question are Teams.nuspec and Teams-1.3.00.12058-full.nupkg. Googling around it appears the files are legit. File 1.3.00.12058-full.nupkg is the same version of the latest MS Teams update. Last month at this time I had false positive virus alerts for the same virus, but the file name was Onedrive.exe. Anyone else seeing this?
... View more
04-24-2020
05:50 AM
1 Kudo
I see bitlocker information as you do in your screenshot! When I looked before posting it was empty I swear 🙂 Thanks
... View more
04-22-2020
01:51 PM
Thanks @dfalcon. I have been through that document prior to posting. I wasn't clear what, if anything, I needed to do for my use case. I will wait to hear back from you if this is even possible. Thanks
... View more
04-22-2020
12:03 PM
I was reading about the new Bitlocker functionality in the new release. We have Bitlocker already deployed in the organization and would like to know if I could use the CortexXDR console as only a "view" or status into the status of Bitlocker on already deployed machines? I am not wanting to control/configure Bitlocker from the CortexXDR console. Is this possible? Thanks
... View more
04-21-2020
10:41 AM
Yes lots of goodies in this release. I was reading the release notes this morning. We have bitlocker already deployed in the organization. If I reading correctly, it sounds like I would be able to display the status of bitlocker in the Cortex XDR console even though we use GPO's for enablement and control.
... View more
04-21-2020
10:38 AM
3 Kudos
Thank you @dfalcon! Feels like it is hidden away. They should be making this a submenu directly off of the Investigation menu.
... View more
04-21-2020
08:04 AM
Hi, I can't seem to find what I'm looking for in the Cortex XDR console. I am trying to find a way to view all alerts generated whether it is from XDR or Analytics. The only way I can see this list is if I create an exclusion Investigation --> Exclusions --> Add Exclusion. Is there a more direct way to view these Alerts? Thanks
... View more
04-16-2020
05:43 AM
@hisingh I have had no alerts for 24 hours now. I would consider this resolved at this point. Thanks
... View more
04-15-2020
05:56 AM
@hisingh I still see the EXE being flagged as a virus. Today, with the new content updates, the virus is being flagged differently. Virus/Win32.WGeneric.ajepxx ID 341677293 @AaronBeck @abrickeen are you seeing this as well?
... View more
04-14-2020
03:45 PM
2 Kudos
Thanks @hisingh . I will check tomorrow to see if this behavior stops. Does this mean there was an issue identified with the Antivirus content?
... View more
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
